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(54) [^Wro^fti] 4HHAftffiilf&* 



(57) imm 

: mm ] mmmmyfoixtzm^mmmmi'nt & m 

6bt £*i£ISrjffli^5n— ^a^tr*— 2 k£fr?- 
|, s #a~ 7 Ki, LS I 12a, 1 

2 b k , 4l£3;h.fc^£ffi*W*I!ttSai 14fc, Hf^ 
3ttrJDX-ri>ll2 LS I 2 2 t, rniB^lfcfl*) ffiLTS 
BH- £ p< * U 2 4 t , MIB* k mriBBf-^Oni L 

■+T2 0 *^IX0Hi Lfdl^^HE-rS^Uffl^o-fe >y+M 

I"f l>$3 LSI 2 6 k „ .Ift^fMf^SMPfflTcr 

#6, sf^C^lt 




(2) 

1 

fJ&£jS-*-£gSl LS It, 

Bt^A £ JUXr 5 H 2LS I t, 
IfflESifcffi 9 ffi L TSPfI-T 4 ^ * 'J k . 

Tn-fe-yifk. 

i^Jt«Tn-b yVtpbTR 0 ffi Lfc«fr*aEtS8SEffl 10 

7°n-te •y+r k „ 
SPI3LS I fc, 

Miam ilsi, friaiB'it^a, mibis 2 l s i s mis 
.x^y, fflriBJtKrn-fey^, fflrlB^iiffl^n-fe-y^s. 
VmrlBlg3 L s I tlW1IW-««Hlffflrn-fe -y^k , 

U 

WFS:*«SgLTa3R<»5^tfftSL, Bi^£A¥L 20 
fcft. Bf#^Jnx k ftri&t k tf)Jt«£ift 0 ii L$r# 

it, 

[mnm2 ] luiem ilsi, mibis 2 l s i awn 

IBSI3 L S I £ 1 -xr)L S I i k Sr^Stk-f- 

[ if 3 ] mib^ * y uaass at* * u -c* 0 , m 

zti&zt t -rtmsm. 1 xia 2 fcaBK^nt^i 30 
[it ] mmmammm 2 l s 1 ttfjirf * ; 

k *«« t-T-SIf 3RH3 t;ie»^)Bf^3fi«flHii^H. 
Clt*il 5 ] mflBSI 1LSI, HufEft 2 L S I av'ttr 

ies? 3 l s i a , ^jsfFM-f- & B§ mt^cm-h z t &x* 

[0001] 

-f & i k te i 0 . Bt^3MEt siwiish 

[00 02] 

[«*<0fiEW] ^*«0Bf-f-^kLT. *HOtI?pBf^ 
TS>l>$f^i|Bi^-^ri^DE S (DataEncryption Standar 

5e<0 7' o •/ 9 iz mi) <9 , 7n -y ? *ffi-CHMMI t J; 

®k-rs. i^^Bt^s, Hu*>. m&>ztitz< so 
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$ K v * k § a £ t>\ %m £ 7X2 -y ? W4T1f 0 

fctf>, fi«:i-»tli, rn-y?ftt;-5E^ft 

[0003] ^OHf-^SJKfFfllfftCOV^-rtA. fM.E.He 
llman, "A cryptanalytic time-memory trade-off", IE 
EE Transaction on Infomation Theory, Vol.IT-26 No. 

J: 9, Bf^SiS^fFflfftT^S. 
[0004] 

[ wnmmz l ± 5 1 -t & mm 3 l *> l ^ ; ^ . 

k. SIB* 1 ^, afffik^O. *fcfFflf^[S^<^-3 
[000 5] 3t:«BWi£Lh<0 i 5 3:|3!J&£ 

[0006] 

■T5-fe«)(c, *l*D5^t«4liff^9Marflraaitt, Bf 

v^t. s^nniLsi k, 

-rsiBiBSBk, nf^s:*sin:-r-6m2Ls it, mie 

^^JDXL^flk. ^Jt^SJt^rn-fevfk, 

■fe -y -9" k , VSBE(Otiib iz-mmn&mizR l biasing 
SrjBX^-^m3 L S I k „ tulB^ 1LSI, mTlBIEIig 

s, msm 2 l s 1 , mz*^ y , fluiBib^TO't -y 

-f. mflB^Erflrn-tr.y^S.^i!fflBm3LS I ^§ijfpf- 

ft. Bf^-^JDXkmrlEHk^bK^^9ML^i3. 

[0007] 2<0^(Cffi2Bf^%B@rfl^3iU. ft 
l^fcfcV^, MIBH 1LS I , MIBft2LS IS. 
tXlalEH3 LSI^l^lSI t^gE"*-* fcOT'fc 

[0008] ft 3<D9g^(zA2Bf^%Km^llKU. ft 
1 Xttft 2 cD^0J]tcfc v . mlE-X ^ 'J (ijlSlE'lf ^ t 
t?tBJt«Tn-fe>y->?-(i. IflBaBBBBaxt'J 
j&MRLfceft 1 * oft: k Lft*§^\ ^tOfflSrK 9 ffi 

•TiaK-citjjtSiL* tot**. 



(3) 

3 

[ o o o 9 ] 3i4 rtfflitzto&v&wgmmaDi. m 
3<nmitzt3^x* mri2nis§^i>rfssi2 ls i tftiirt- 

[0010] m50%uj^SHf^5fi^fFff^Si±, fH 
351 LS K l>TfElg2LS iatPffiriEH3LS IWL 
[0011] 

m&mHBmmz^xtmt&. zcom. desbi^- io 

[ooi2] mmcomm i . 0 1 t±. ^wncommcom 
m 1 -e* * Bt ^sffpiffi^a ^^-f 7"n -y ? ere* 4 . 

Bf-^SSfWaffSISii. o-^;Prjyb°i-^2i:, 
?h6a, 6 b , jl~ >y h 6 a , 6btD-^ay 

[0013] n-^;l-3>-b°i-^2{i. mS.£fa<7)*§ 
I^a-f-J:^^-?!^^^^ a-^b6 20 
a, 6 b{±. n— ^;t-a>-b°j.— ^ H^t><r>W^,zi. 0 

a, 6bll Yl~j})Vuy\? a.-? 2hmmWi^iVZ 
^---y M4Hlfci5r$-2fflfc:KR£;3*i/$\ 

[0 0 1 4] -y h6 a, 6bll o-^/l/ayt 

a-* 2 fc *>y h 7-? 4 ^^LTItMSa^lJfPfflT 
Ot7t8^tU ^OfWM7°C?-b'y^8{4, JL— <y 30 

?i*SftfflcOAX 1 OSr^fC, Jffl LS I 1 2 a, 1 
2 b . IgflgeiK 1 4 , M^o 7/16a, 1 6 bRXf 

[0015]SlLSI12a, 12bll f&*?- &||? 

6a, 16btl mm&mzti V ^TfflO^Srfi 1 3 . 
[0 0 16] ;»ii^0 7^16a, 16bF«3(.Cia^ 40 
"Ctt, Jt«7°n-fe<yif 2 0t:S2LS I 2 2S^^U 
24/& 5 i^^TUS„ JtJRTn-fe>yif2 0{i:, J^'J 
2 4^S2 LSI 2 2^$UfPLT. £E»S3R<98SS£fW 
m-fh. j^^'J 2 4-Cii. ^4**SBH-4. -fLT. SI 
2LS I 2 2Tii, Bff^XSr MT.-f& . -tLT, JgSHS 

[0017] rifflrn-t -y+n s-m. mmm v 7 
16a, 16b &i£fotzMcDmm£mt-f& o icosjfE 

fflTntvt 1 8 fcfi, SS3 L S I 2 6 &Bm%tLX & 50 
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0 . §13 L S I 2 6««!iEffl7°n-fc •y-fl 8 tfflfftligffl 
[0018]|g2LSI2 2&.t>*3fS3LS I 2 6t:|*|jis 

S*iTV^&*#JnxilIII*ta2t3i^-. B2fc33vvc 

Hf^-iaXIUS#ii, Bf#^EIB3 0 & ffig^lll«3 2 t £ 

mmz£r>x32BZtL&„ 443. Ztlt>e>®8&30^ 3 
4. 3 6. 3 83&*ffiH§irCVvg, 0 -fel^^^3 4(i:^hSI5 
*z\s7?3 eteVm-lkCD^m&tyVWt, ^1/7 9 38 
[0019] i 3 &ffij$3*u£i»3ttftiHii8E 

[0020] Mwmmmx'te. mrt^-r J: 3 4^hiit- 

[00 2 1 ] ( 1 ) a— #/Vn>-h°ja.— ^2(4. jl— *f 
[00 22] (2) n— tf/mi'tr.a.— *2li, ^ffrfc 

?4y°m*§rtfmz-in o o#*»6 2 o os^) . 

ISM, «^<7)^46<7)JPliS0jlLIlIiS£T^<JOyN°5P< 
— ^7l7-^4^LT, #i-^6a, 6 

[0023] ( 3 ) ftJfSMTo-fe yy-8l£W-X. 

1 L S I 1 2 a , 12b^g>), ^OSS^^^^ 
«fc43(t4^gffi ( i n d e x#^) 3&»6^W-ft. fylj 

itr, ^iUffi(4. ^io^-fr#-^-« log (m) + 
mmmi nmrnzmfz-ttmrnm^imxi* i . 

[0024] (4)IlLSI12a, 12b(l W 

SVMffi^ A* i; LT . *6SSiut^>^ -f rfcJE t 

tzmmzftw *fu^tt*4jaw-&. ins 1 1 2 

a, ^bllrti/l^rttfe, ±ISff L WB £r TOIffi 

^ ^lLSI 12a, 1 2b(i$tjffllfflrcr-tr'y-)f8t 

[00 25] (5)i»ffl7nt7t8(»7iMS 
ttJR-afca, ( 4 ) T"CS fclSil L S I 1 2 a , 1 

2 b^K^iU f^^tO^f^JiScSra? 1 LS I 1 2 
a , 1 2 b KUffiti . i(^fBJj?»4fW»ffl7*o-fe -yf 8 

[0026] ( 6 ) MPfflTD-fe >y-^8ti:. ^O^rTcO 



(4) 

5 

[00 27] ( 7 ) |J«B7nt -y-tf 8 i4£T<7)fl<7)f£ 
jabWftTLfc*6-. ^Og£n-#/lxrjyb° A -7 2(: 

[0 0 28] (8 ) n— ^ayti- ^2i±^TO^- 

[00 29] jSM^fcoivro^Jitco^T, 

[0 0 3 0] ( 1 ) n— *;k3>tA- ^2tHf^-S; 
#\ A* Sits. 

[00 3 1 ] ( 2 ) n— ^^nvfA— ^2{i. 

[00 32] ( 3 ) HMHrn-b -y-f 8 J4, Bf-f-^S:^ 
Sgyn 7716a, 16b{;10- ^^aiEtt^S 1 4 
a»S>^£fl!E9SBU &6$K7w9 1 6 a, l6bfcR 20 

[00 33] ( 4 ) -y 7 1 6 a , 16 bOjtR 

rn-fe-yHf2 0i±Bf^i:«i:&g{tB5St. ^ixSr^ 

2 4tfi«t4. 
[0 0 34] ( 5 ) Jt«Tn-fcv1f2 0IJS2LS I 2 

aiL, ac^SSIffciOitKSfi-S. Z<om. A*3*ufc 

ffl <■§#:*:> a. "f#fl:iii»3ot«A-&r. ffin^m 
» 3 2 comismcOTtffiytit: fc <W3r L v v£ fc § . 
[00 3 5] ( 6 ) M/n-fe >y-^2 0 {i^OSfgO^ 30 

[0 0 3 6] ( 7 ) Jt«Tn-fe>y^2 014, *rU^«* 

[00 37] ( 8 ) WMro^SfcfeftS JPXMOil L0 
&T£'{t, ( 6 ) S^' ( 7 ) 
[0038] ( 9 ) Jt^Tn-fe 7t2 0 i4, ±IB ( 5 ) 

- ( 8 ) cr>mmz&^x , —wct&m^mt , — st-*- 40 
h m& h ~> tz *# \z a (t & £*f *&t * *maffi t , 

fflTo-fev^8^$gs-r^. 
[0039] (10) warfflrn-fe yif-8ii-itLfc« 

7n7?16a, 1 6M;:*fLT, ±IS (4 ) ( 1 50 
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0 ) «0flnX®3£fr 5 . -f- LT, f BttSIH 1 4 

[0040] (11) JftfEfflTTH: y*f 18(i, &ffr£ 
Bfrteff fcfcfc JniEHRT*»6 , ±IESBRfc:B Lfc flnX0 

T&WRt/9mm&.m&m3 l s i 2 6 tia* . 

[0 04 1] ( 1 2 ) H3 LS I 2 6(4, I^WJffi, ¥ 

$> 1 ^\^fzmmmnnT.^m^mK>mLtz^t , » 
at: i 3 -jgjpx^ii Lfc*sft £ , zmfflru* -v 

ft*. 

[0 04 2] ( 1 3 ) ^HfflTn-tr.y+M 8(4, ^3 L 

s i 2 63&»6»tKofc«[wa^, i/sr*» 

^fii:, Bf^Ci:, tittW-*. JtRLfcJSS. 
-St LA*-£, 1 llI*«!Slf5^3rC >«*«BBSa ( Bf^- 

[0043] (14) iWTn-b .y-tf 8(4»Mte*^ 

SftKofc^, ^M*7h7-74^^U, n 
-^;l-n^b° A -7 2(cfg^^„ — **TfBS*S 

-)f 1 8t51^>o 

[0 044] (1 5) flB«ffl7°0-fe<y-9-8li^T<?>^5 
H«7 Lfc*&, n-*WVt jl-^ 2 (cML 

[0045] (16) v-j])vziy\? A -9 2imwm 

m (St) £SW-IR -3 -e<0fitfSrr4fc*fc, 

y h 6 a , 6 b tc*f l, mm<7>fp±*m^-t&<, 

[0046] JSLbf5 < 1 >*»£>< 1 6 ) cojjilfcj: 0 , 
flfM^(4^T^-§ . 

[0047] liLhOJ; a LT, HSfcO^JK 1 t=^S*l 

[oo48] mmmmi . ^mmmm.mm2.xh 

SfiSiMffiilB k S *(4 , JtK^n -fe -y 2 0 (c 4 

o, ^^)2Ai,zm^ti^m.*m^:^^zh v ), <&w 
KffifmmimmcoBm 1 1 r— s . 
[0049] mmmm 1 Ti4, jasrn-fe -/t2oii 

S2LS I 2 23&»^>S»t]R-5fc«fcs ^0#SfRt, t0 

4 & . *;t, mtmwm 2 -m , mmcomm 1 ^^1% 
( 4 ) -c^^e u 2 4 t«t*B(ftr*iifc, y- h*? 
AyyaJ^i^a. ^tt(c4 0, ±IB^^t— y;l-<7) 
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flHBtffttm 3 * U 2 4 fcfitt 3 *VC , JrbKBt 

IHfcJBIW-* ±l5^v^ A t LTJi. 

OgSliSTtrMfc L. Tffil Og (M) t'^bjAyya 

y y ^ h T-n^f & -ffiz. mmomz 2 ^imcomz 

[ooso] mmmm3 . ^mmcommmmsx-h 
h mmmmmmsiza \ ^x , mmmm 2 -ess § tut 

mm ( 4 ) -eft*** i; 2 4 tisifrrs y- h*? 

*nsfi»ff^T-{±. ffimffitm ( 6 ) o^s-cy-i-^ 

J \ >y x a j&Jfrirft . i 0*3&* , Ifi'ff 1 4 tfStt § tl 
X^&. i Oi§-£ 1 ft S V - h ^ -y $s a CD&X 

[00 5 1 ] (61) JMfWfflTn-fc -y-f 8ti?IOffi$rJt 20 
S7ot7t2 o^mz>. 

[00 52] (62) Jt*E7°0-b -ytf 2 Oti^Ofl 

t'j24 tcsiH L , cixtcy - h-^ . y j.co^^a 

^ff^o ^LT. 7' £ £ ffr£ L T , £ 

[00 53] (63) Sfflfrn-fe >y^8(2, SOTX^ 

[00 54] LT, JBffiftBlaRtCtt. iftgggg 1 4 

[0 0 5 5] mMcoBMSte&^x . *lu«*b.y hi/ 

^ bir.§> b -y hMzmmtz, z. t x\ m^mmx 

u m<7m?4Tm^cr>m*ftm mm) -rtzt^ 
[0056] rn.ffi.mm4 . m 1 t^-f- ± 5 ^o 

^llfflrnb-y+M 8k*JM«tf5tcOfc:UTV^36«. * 40 
SgffiOJBJBrcU: . i»ffl7n -fe -y ^ 8 ^fEfflT n b -y 
1M 8 0$?iMg£*-f4.> c\cr>tztib^ iEI/nt.y 

6(i$Wfflrnb>y-9-8X(i^'xi 0teStt3*i4. 

[0057] mmmm 5 . mmmm 1 ora 

ASaiTtts *lLSI12a, 12b tl OOWJffi 

*c«££i£i/o^ a* , ^an^jRB'Ctt, 1-3 

COL S I 1 2afc#»<0fc^«*^;lTi^3-£4. £ 
OH, lf^ftlll»3 0 j ?«fi'fl:lll»3 2t:tt, ^oi*jgp 
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[0058] ^mffimm 5 t*j ^rti . 5 -hhw 

§ SOT, LS I 22 , 2 37° -y 

[0059] mmmme . mmmme 
afiSfpfl^STfi . nmmm 1 rsu * o t> «Ti> ^ 

glLSI12a, 1 2btS2LS I 22 lo 
OLS I tiis^T^S, 
[0060] rflfc i 0 , M^{fft?MM^ffli>^2 L S 

1 2 2 t?f;b-£.S> IfdlLSI12a, 12b£ 
tet5; fcj&^S l. t Il.SlLSI12a, 12 

2 LS I 2 2fcK*§*lT^ftttlKiV-f xVv-^ttfg 

»f5tmr^ai:, WSBSLSi;. Tli^SM 
ifim&%<, Z(V?ztb, mi LS I 1 2a, 12bt$2 
LSi22t&, ftfflS-fr&ieHtcliWRI* 1 **. 4 
it, g3LSI26tE2LSI 2 2 i:4±ffl$i££ ; fc 

[0061] mmmm7 . ^mmmmomm&mm 

jfifc* 4 . -e lt . jisiE'it^ * y *^ 2 L S I 2 2 O 
a73ffl t m<ommb m Ltz t mm Ltim&izn , ^ 

[0062] ± o , mm<o%m2Tftfotixi^ 

$&miffoZk&<* S2LS I 2 2 0aj7jfflOffli: 

« . SS5c051ffl«^ * 'J 4MW LTtStt L , % 2 
L s I 2 2 <0ffi*ttS*4H^IB«> t y t/n- K# 

[0063] ^ffio^®8 . jf.mmmmnm^wm- 
mmwizte v , mmcomm 1 -c^rm^stfiiiFw^a 

t= - JtKTo-fe yf2 0 «I^g2 LSI 22 izmnb 

[0064] mmmm, i xmmyv-t 7t2on 

jSffilBffi-X tUCffi2LSI22 OtBTlfi £ SMi> . -t t 
-b-yHf2 0{i. ^Oft^-^TKL-Xh^gitKD. MfW 

fflrot -y -9-8 tfg^ tr v^tinxh h . <r £0fc», 

0 , H2 L S I 2 2 £S#>3&tJ i i: 4 „ 

[0065] mmmm9 . ^mmeffit&nwmBm 
mmsxn , sg^mm 3oto^t, des Q^tzDg 

utSBe^ifcj&^irffi-c**. ;ofc^ 
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#ic*f LT fc . at #9HKIW Srfi 1 3 £ t jfi^S & . 
[00 66] 

[00 67] 3f&g2 fcE«<0fMBfc:J:*ur, ISiSe«^ 
LS I JIools I \z.%)i#~>h Hbdzi. 0. StBl*K0 

S . 4 , 1 oOL S I 2r WSSrf^Ur i V ^T, 10 

[0068] |**^3fc:iEtt<^6rafcJ:*Ur, 3SKiS'K 

[00 69] 11*114 IZimcomitZMf, S2LS 

I fctfc«ro-fe •y^W&afSoCHMtf JniT& i fc 
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[0070] If #Jg 5 £IBtt<Z>Sfe9ifc: J:*Uf. #LSI 
[HHOffi*^BJi] 

[mi] ^WMcommmm-c-h & emmmwmmm 

[02] *SWBtf5H»^KIiT'ft * Hf*8llXEII&£ 

2 n— ^/t-ayb".*— 4 ^7h7-^< 6a, 
6b 8*Jfflrffl7°o-fe>yHf, 10 1 
2a, 12b glLSb 14 IB'ltlSK. 16a, 
16b mm7v v 9 . 18 ^liEfflTn-fe , 2 0 

M7ot7t. 2 2 I2LSI, 24 *=EV , 

3 0 BWtHIKk 3 2 tt&fcmJHk 34, 3 6, 3 
8 



[01 ] 



[02] 



mi m 1 

LSI LSI 




1ft gjB 

r iio 



ten 



.20 



* 3 I — 

LSI M* 1J 




